$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa File: ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa (raw, json) Hash identifier: WmE3aKhhXp9QtI5JCjrpb7hqRZOtG3jg3qx5E9jKTaY= Subject key identifier: 74:CD:55:CC:54:73:A2:6E:7B:CB:88:47:7E:7A:42:7E:59:37:89:BD Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F4328584B23318AD47FFEBCEA60333C00 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 63150 IP address blocks: 68.168.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:8a:d4:7f:fe:bc:ea:60:33:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=15dc1396-183c-4f15-9a17-61a40404c538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a1:49:82:87:0c:60:c8:3f:21:7e:e4:88:28: e3:b6:8a:8c:7e:ef:9b:1a:26:e9:d2:f9:8e:84:d2: b9:38:1c:98:28:7a:43:cb:5b:a4:23:e0:49:aa:1c: ed:79:6a:6d:8c:39:28:b7:75:fd:f6:7b:39:8f:e2: 14:10:47:0d:dd:9b:32:ae:8e:12:7d:71:0b:ce:39: e1:7e:8c:a7:8f:3c:e9:ce:5c:36:01:87:6f:37:8e: b3:f6:77:60:17:d7:72:40:a8:28:ea:d6:40:4e:26: 63:5f:c6:fe:e7:f0:d4:ee:f7:3d:e9:ef:78:f9:17: 6a:4c:34:69:e9:06:ab:57:8c:ea:da:7f:60:4d:e2: 5f:25:24:23:0a:58:b3:ed:5f:d0:a9:de:1f:d8:93: bf:a7:62:45:e7:23:42:28:8f:b8:e5:8a:d4:0f:1f: 8d:88:1a:06:9b:53:17:b8:29:d6:2d:b7:d3:78:bb: 22:b1:58:50:30:a8:bf:e7:f2:72:26:5d:56:b1:e2: de:0c:f9:31:3d:60:ef:87:4a:1f:6e:90:0e:f5:f1: b5:e7:cf:b3:3d:25:d9:3e:87:64:5c:37:e5:ea:56: b6:64:22:01:64:6c:68:a1:c1:81:15:8e:ae:6f:a6: f0:b1:30:3a:e4:2d:d4:09:3d:f9:9f:48:c9:87:ad: cb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CD:55:CC:54:73:A2:6E:7B:CB:88:47:7E:7A:42:7E:59:37:89:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 68.168.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ce:ff:71:e0:12:65:89:ba:af:40:1e:eb:6f:01:60:82:6b: da:26:03:d0:46:a1:38:15:d2:49:52:f6:bd:e0:6f:fb:72:b7: 06:20:c9:93:80:f3:13:a1:bf:b1:73:80:60:d2:51:53:7e:ab: 81:ae:4a:19:1b:b1:82:69:76:22:37:81:95:7e:7c:1e:59:23: 11:99:a8:9b:d2:6d:08:b2:7f:bc:a1:ef:fe:e6:8d:1e:9d:42: 60:45:b5:50:51:95:46:27:cd:a7:6f:17:9a:73:3c:0e:d0:39: 62:43:02:62:02:ba:7b:a6:5c:4f:f7:90:2a:02:fc:56:53:d3: cd:6d:91:2a:ba:cc:bb:2a:10:19:3c:6f:c3:3b:47:83:48:06: 6e:6b:bf:98:90:cb:32:41:5d:ab:36:fb:31:d6:31:4c:1e:2a: 17:17:1b:fc:40:87:a8:b7:f9:d0:ee:80:aa:c2:b6:44:52:cd: af:6e:25:10:7d:6e:67:fe:80:6a:59:b7:db:ef:99:d9:d8:91: 4b:43:c5:db:d4:5d:c6:40:d2:13:89:94:c7:0e:a8:5e:e5:86: 5d:82:8c:50:b3:12:2c:7e:43:ca:3f:f2:64:52:d9:d1:2a:71: a2:28:50:8a:8f:dc:6a:e9:52:46:c1:73:bc:e9:a1:a2:be:78: 46:75:e4:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYrUf/686mAzPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MTVkYzEzOTYtMTgzYy00ZjE1LTlhMTctNjFhNDA0MDRjNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaFJgocMYMg/IX7kiCjjtoqMfu+bGibp0vmO hNK5OByYKHpDy1ukI+BJqhzteWptjDkot3X99ns5j+IUEEcN3Zsyro4SfXELzjnh foynjzzpzlw2AYdvN46z9ndgF9dyQKgo6tZATiZjX8b+5/DU7vc96e94+RdqTDRp 6QarV4zq2n9gTeJfJSQjCliz7V/Qqd4f2JO/p2JF5yNCKI+45YrUDx+NiBoGm1MX uCnWLbfTeLsisVhQMKi/5/JyJl1WseLeDPkxPWDvh0ofbpAO9fG158+zPSXZPodk XDfl6la2ZCIBZGxoocGBFY6ub6bwsTA65C3UCT35n0jJh63LEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTNVcxUc6Jue8uIR356Qn5ZN4m9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvY2NhZjRlMDItOWUzMC0z ZjI5LWJmMDQtNGVlMGE1ZTllMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfO/3HgEmWJuq9AHutvAWCCa9omA9BGoTgV0klS9r3gb/tytwYgyZOA 8xOhv7FzgGDSUVN+q4GuShkbsYJpdiI3gZV+fB5ZIxGZqJvSbQiyf7yh7/7mjR6d QmBFtVBRlUYnzadvF5pzPA7QOWJDAmICunumXE/3kCoC/FZT081tkSq6zLsqEBk8 b8M7R4NIBm5rv5iQyzJBXas2+zHWMUweKhcXG/xAh6i3+dDugKrCtkRSza9uJRB9 bmf+gGpZt9vvmdnYkUtDxdvUXcZA0hOJlMcOqF7lhl2CjFCzEix+Q8o/8mRS2dEq caIoUIqP3GrpUkbBc7zpoaK+eEZ15Hw= -----END CERTIFICATE-----Generated at Sun Oct 19 23:26:16 2025 by rpki-client